This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
File:                     8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json)
Hash identifier:          t3ESVQ/kWRT4pkhbDw2lVlShJ/KfAJUbZBW2HyGCYjA=
Subject key identifier:   76:67:86:53:5C:73:B1:00:80:57:0A:9D:54:4F:C7:D7:50:2F:DC:18
Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8
Certificate issuer:       /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8
Certificate serial:       718F9C5499D9E1D8B365C4BB8701757EF41F9A67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
Manifest number:          02FF
Signing time:             Wed 17 Dec 2025 00:21:43 +0000
Manifest this update:     Wed 17 Dec 2025 00:16:43 +0000
Manifest next update:     Sat 20 Dec 2025 01:47:43 +0000
Files and hashes:         1: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: d3EczDOEKFnJZSi/mXbv6kWPY6oK1SqyadhZuQpb4/8=)
                          2: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: t9YQtfzm/lHmSV86CtH9HsZ77AAtEQ8uQfBKONl9Q5M=)
                          3: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: DgLKkC/jF8zKIVNdNQyUD9vzgLj84NQLEk3DQtPjHPw=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl
                          rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 01:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8f:9c:54:99:d9:e1:d8:b3:65:c4:bb:87:01:75:7e:f4:1f:9a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8
        Validity
            Not Before: Dec 17 00:16:43 2025 GMT
            Not After : Dec 20 01:47:43 2025 GMT
        Subject: CN=766786535C73B10080570A9D544FC7D7502FDC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:c0:6b:cc:f2:d5:23:f4:84:ed:18:72:ac:
                    f6:1b:76:9c:26:2c:20:90:8f:57:e2:0e:7e:7d:c6:
                    e8:95:8e:de:bd:20:04:f5:1b:9c:2f:90:9b:4d:e7:
                    13:bd:e4:17:ad:96:71:6a:e8:98:f9:3c:05:40:2f:
                    1f:bc:fd:56:7e:b2:91:15:bf:00:8d:5e:3d:73:e0:
                    6b:b7:e2:32:a7:9a:fa:b8:c9:6c:9e:89:e0:07:c7:
                    5b:cf:e9:a2:ca:8d:06:87:ef:a2:48:d0:c8:c6:f4:
                    da:ac:94:52:c8:d1:08:76:a0:d6:0e:b1:c7:e2:08:
                    b0:ac:ba:db:58:7f:bd:a7:50:a6:d4:62:84:86:c1:
                    ec:a5:ac:b6:f8:62:59:c9:0f:92:e1:c2:ae:b6:ae:
                    6b:6e:34:73:c8:6a:9a:e8:4c:a4:43:05:bd:e7:73:
                    d3:e3:8b:72:f5:29:99:0e:eb:6a:df:06:22:19:6a:
                    79:65:1a:ef:55:5f:7e:54:47:b9:44:0c:2e:ac:dd:
                    5f:5b:d0:0a:3c:93:49:98:9b:71:e4:db:e1:a5:f2:
                    ff:82:cb:b7:bb:f0:57:26:46:9e:f3:df:52:f9:5f:
                    c2:41:3d:95:4f:36:57:c5:5c:9c:be:82:bc:e0:8b:
                    06:38:12:33:5e:4b:34:4c:39:f9:05:86:f8:d2:1f:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:67:86:53:5C:73:B1:00:80:57:0A:9D:54:4F:C7:D7:50:2F:DC:18
            X509v3 Authority Key Identifier:
                keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:4b:1b:e5:8b:f4:56:40:31:2a:f8:04:9d:c6:c8:e5:33:
         52:d9:0b:2d:d7:80:0e:f2:19:1b:ca:f6:86:3c:6d:4f:91:d3:
         a6:9e:29:ad:93:fb:fe:7a:84:91:97:96:c8:a1:b2:85:51:90:
         ce:bf:22:a6:a9:0c:05:c2:a6:a4:00:7a:a9:2c:b5:ab:e3:6c:
         14:e7:eb:04:c6:00:9d:f7:34:91:34:71:92:ac:bb:3e:fd:2a:
         48:96:11:d2:e4:fc:09:61:46:9b:a2:12:e6:c2:bf:2c:20:ac:
         b9:b3:f6:85:f8:46:a3:9c:21:8a:b0:29:4f:8a:b9:96:f7:27:
         2b:9b:d3:37:70:54:cd:41:74:2a:81:fc:a4:99:f1:53:9d:e5:
         ca:99:81:21:6e:c2:d1:55:fa:6c:3d:cf:b9:6e:a5:76:4c:45:
         49:4c:ef:61:c1:c0:24:83:90:91:aa:d6:11:8a:7c:b2:79:89:
         d8:7a:67:fa:c5:97:e7:86:04:cc:4d:29:c7:e2:14:f5:f6:48:
         c7:33:83:f0:aa:18:ab:f7:0c:03:43:1e:3d:c9:d2:eb:90:80:
         4e:c3:3b:24:30:f8:8d:1c:8b:80:6f:d9:7a:9f:82:a4:c9:73:
         61:ed:92:52:30:fb:a1:2e:44:86:b1:eb:32:b8:d6:f4:15:39:
         17:0f:ab:85
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcY+cVJnZ4dizZcS7hwF1fvQfmmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz
QjA3MkVEODAeFw0yNTEyMTcwMDE2NDNaFw0yNTEyMjAwMTQ3NDNaMDMxMTAvBgNV
BAMTKDc2Njc4NjUzNUM3M0IxMDA4MDU3MEE5RDU0NEZDN0Q3NTAyRkRDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGMBrzPLVI/SE7RhyrPYbdpwm
LCCQj1fiDn59xuiVjt69IAT1G5wvkJtN5xO95BetlnFq6Jj5PAVALx+8/VZ+spEV
vwCNXj1z4Gu34jKnmvq4yWyeieAHx1vP6aLKjQaH76JI0MjG9NqslFLI0Qh2oNYO
scfiCLCsuttYf72nUKbUYoSGweylrLb4YlnJD5Lhwq62rmtuNHPIaproTKRDBb3n
c9Pji3L1KZkO62rfBiIZanllGu9VX35UR7lEDC6s3V9b0Ao8k0mYm3Hk2+Gl8v+C
y7e78FcmRp7z31L5X8JBPZVPNlfFXJy+grzgiwY4EjNeSzRMOfkFhvjSH6qbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdmeGU1xzsQCAVwqdVE/H11Av3BgwHwYDVR0j
BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw
OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3
MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy
YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG
MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAArbSxvli/RWQDEq+ASdxsjlM1LZCy3XgA7y
GRvK9oY8bU+R06aeKa2T+/56hJGXlsihsoVRkM6/IqapDAXCpqQAeqkstavjbBTn
6wTGAJ33NJE0cZKsuz79KkiWEdLk/AlhRpuiEubCvywgrLmz9oX4RqOcIYqwKU+K
uZb3Jyub0zdwVM1BdCqB/KSZ8VOd5cqZgSFuwtFV+mw9z7lupXZMRUlM72HBwCSD
kJGq1hGKfLJ5idh6Z/rFl+eGBMxNKcfiFPX2SMczg/CqGKv3DANDHj3J0uuQgE7D
OyQw+I0ci4Bv2XqfgqTJc2HtklIw+6EuRIax6zK41vQVORcPq4U=
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:23:42 2025 by rpki-client